Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6483cfb-7ab1-4508-bf6f-8953957d8887/ef196b245599fc1d84095397e103a4d05b86c0ee.roa
File:                     ef196b245599fc1d84095397e103a4d05b86c0ee.roa (raw, json)
Hash identifier:          mmjxY8ul7Sdquvn5bzKs0UWDA9VU1GJCv9m+v2pP7GE=
Subject key identifier:   33:BF:EE:D2:85:A3:19:17:F3:65:DA:1F:FD:3E:F3:E1:62:F6:DB:BD
Certificate issuer:       /CN=d096404f63772aa8165da1f7e01c34c4e378a916
Certificate serial:       0D3E44
Authority key identifier: AE:84:A6:DF:5E:30:C0:53:10:DA:CC:67:B6:EF:FE:41:4E:74:D2:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d096404f63772aa8165da1f7e01c34c4e378a916.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6483cfb-7ab1-4508-bf6f-8953957d8887/ef196b245599fc1d84095397e103a4d05b86c0ee.roa
Signing time:             Wed 24 Mar 2021 14:38:03 +0000
ROA not before:           Wed 24 Mar 2021 14:38:03 +0000
ROA not after:            Tue 24 Mar 2026 14:38:03 +0000
asID:                     27725
IP address blocks:        152.206.0.0/15 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 867908 (0xd3e44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d096404f63772aa8165da1f7e01c34c4e378a916
        Validity
            Not Before: Mar 24 14:38:03 2021 GMT
            Not After : Mar 24 14:38:03 2026 GMT
        Subject: CN=ef196b245599fc1d84095397e103a4d05b86c0ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:67:93:51:e3:77:bd:76:8e:fa:7a:3a:7f:01:
                    68:10:49:1f:6a:25:e8:ba:14:31:c4:f6:a9:83:45:
                    61:97:2e:31:3e:3b:66:74:be:13:39:4e:b5:95:9f:
                    f9:f3:07:78:98:d1:ef:be:9e:e3:2a:d5:84:3b:c3:
                    65:8e:5f:64:7e:91:49:99:cb:75:c0:a4:4e:4d:12:
                    25:8b:10:5c:7e:0d:ff:9a:ac:98:d7:6c:48:48:b0:
                    a9:aa:bd:cb:6e:5f:c7:c8:18:96:1c:15:cf:c8:0b:
                    79:9c:8b:a6:c2:ca:d6:f9:7f:04:9e:8d:da:52:12:
                    a7:60:25:28:7c:be:83:fe:67:5b:2a:63:ed:61:9c:
                    b4:7a:8a:5d:c0:21:6f:c4:47:12:71:7e:0e:67:f2:
                    92:f8:1c:db:4c:08:40:bd:94:dc:0e:ff:c8:74:b2:
                    0f:66:f4:15:bf:6c:66:4c:90:01:a5:61:f6:e8:4f:
                    ae:28:35:42:f5:44:b8:86:fe:e0:05:83:6e:6d:3d:
                    ea:4f:5a:3f:72:f1:f6:3f:76:9d:b7:9a:33:10:1c:
                    95:ef:be:5a:6a:f5:82:17:f7:18:43:bc:d1:dc:f5:
                    fc:e0:da:34:d0:7e:e6:99:9a:6a:d2:74:74:b0:f6:
                    95:95:7c:7a:9f:6a:06:6a:9d:eb:a6:81:77:c1:f9:
                    d0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:BF:EE:D2:85:A3:19:17:F3:65:DA:1F:FD:3E:F3:E1:62:F6:DB:BD
            X509v3 Authority Key Identifier:
                keyid:AE:84:A6:DF:5E:30:C0:53:10:DA:CC:67:B6:EF:FE:41:4E:74:D2:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d096404f63772aa8165da1f7e01c34c4e378a916.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6483cfb-7ab1-4508-bf6f-8953957d8887/ef196b245599fc1d84095397e103a4d05b86c0ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6483cfb-7ab1-4508-bf6f-8953957d8887/d096404f63772aa8165da1f7e01c34c4e378a916.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.206.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         70:f7:5a:f6:5f:b8:c9:b2:63:8f:2b:74:ec:48:53:bc:07:1e:
         10:77:28:5f:14:7b:16:52:f2:51:f3:97:35:21:6e:7d:1f:e1:
         2c:17:a8:f4:9a:89:6a:21:4d:c3:68:86:b2:d2:eb:8c:10:1c:
         40:de:e3:98:55:4f:a5:02:72:73:9e:58:30:92:96:d4:c0:9e:
         94:0e:eb:5b:25:5a:c3:f5:8a:94:af:13:e3:e6:7e:35:64:2c:
         7b:10:46:36:3f:74:20:ec:e6:fb:f8:32:2e:ff:6a:d8:3d:d5:
         a7:3f:95:8a:bf:24:cd:d3:63:18:79:f6:37:d5:a0:7f:cf:5a:
         3c:df:33:37:97:55:b6:82:d6:18:55:a7:67:97:1e:11:70:79:
         3a:e1:6e:9c:b8:b4:22:43:8f:b9:3b:d3:df:7f:34:58:45:4d:
         69:7e:1d:30:f8:3e:9f:40:93:26:6e:54:0e:91:f1:4b:68:51:
         68:01:94:a8:d9:27:3c:1d:7f:4d:4d:02:7b:37:47:1a:a1:ac:
         18:65:76:ee:60:f1:27:3d:64:14:11:00:26:b6:d9:12:28:5b:
         22:57:b1:d1:93:a8:ef:46:fa:8d:d4:fb:84:96:19:e3:94:60:
         bf:5e:fb:38:75:32:22:3b:d8:be:9f:a7:08:25:a3:35:7a:6a:
         3e:35:58:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----